|
Posted by SterLo on 05/31/07 14:40
Look - I understand your concern for a piece of code that I generated
in 30 seconds.
I don't think you follow my logic on how forms are supposed to work.
Go here: http://www.quirksmode.org/oddsandends/forms.html
The code that I wrote will most definitely pass a test from
validator.w3.org, if you don't believe me you can check it out.
But regardless - it was not even the point of his question to be HTML
compliant, he just wanted the concept of how to log-in.
The PHP isn't the most solid code, but I would be very surprised if
anyone performed an SQL injection on it.
Notice:
"/* Now I am going to skip the error checking part of this process,
let
me know if you still need help with that. */ "
Any decent error checking and character stripping/adding would solve
most if any security risks.
Thanks for being a self opinionated guru :op
[Back to original message]
|